Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3137302e38322e35362e302f32322d3234203d3e20323632373330.roa
File:                     3137302e38322e35362e302f32322d3234203d3e20323632373330.roa (raw, json)
Hash identifier:          ClwVSWCFscpyUExu2TglZaOuznP1sIswmn56BHMvZAw=
Subject key identifier:   0E:5C:41:B8:46:6E:0B:7F:D4:FD:E8:2B:AC:99:AC:06:79:39:EC:83
Certificate issuer:       /CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
Certificate serial:       5DEAA8A9E50F7A4AE0C41EA7EAB7E4C00D39B650
Authority key identifier: E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3137302e38322e35362e302f32322d3234203d3e20323632373330.roa
Signing time:             Wed 14 Jun 2023 14:00:00 +0000
ROA not before:           Wed 14 Jun 2023 13:55:00 +0000
ROA not after:            Wed 12 Jun 2024 14:00:00 +0000
asID:                     262730
IP address blocks:        170.82.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ea:a8:a9:e5:0f:7a:4a:e0:c4:1e:a7:ea:b7:e4:c0:0d:39:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
        Validity
            Not Before: Jun 14 13:55:00 2023 GMT
            Not After : Jun 12 14:00:00 2024 GMT
        Subject: CN=0E5C41B8466E0B7FD4FDE82BAC99AC067939EC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:b1:da:a6:dd:e8:4b:36:d0:66:75:79:70:
                    c7:e5:60:f8:20:3a:9c:ee:bc:68:ee:a1:66:dd:c6:
                    db:29:25:dd:83:23:88:3e:be:34:5c:48:a0:f5:8b:
                    ce:d1:84:52:28:7e:ae:c3:01:79:6c:76:1b:40:50:
                    62:42:6a:46:4f:14:c0:07:ec:c3:d9:f1:99:78:21:
                    ff:d4:f7:b2:6a:12:2f:43:cf:c3:9e:8a:a2:10:77:
                    11:72:c8:81:c4:b6:e0:f6:56:de:6d:64:ad:cc:b2:
                    65:11:5a:42:72:b1:42:38:59:a8:0b:72:b8:6a:71:
                    5e:a2:e3:e6:eb:59:eb:55:e8:6c:11:ab:6f:98:00:
                    62:61:e0:23:f2:17:de:82:12:71:29:bf:eb:b7:56:
                    df:d6:4e:27:1e:2a:fb:9a:9e:01:24:41:9c:4b:8e:
                    b1:78:65:a7:98:2d:14:52:ed:fb:24:74:a8:f1:de:
                    cd:59:54:bb:57:79:aa:ed:ad:d0:16:f8:a9:65:26:
                    5d:79:ee:b1:27:16:8e:ac:61:06:d0:29:71:fb:d6:
                    b9:38:aa:52:fe:7c:b2:f0:70:6d:1c:be:86:e2:63:
                    e7:c8:97:3b:49:e8:d8:3f:76:3f:7a:c5:e3:e0:f9:
                    56:61:42:6f:98:8b:78:c8:8c:0b:07:74:42:9d:eb:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5C:41:B8:46:6E:0B:7F:D4:FD:E8:2B:AC:99:AC:06:79:39:EC:83
            X509v3 Authority Key Identifier:
                keyid:E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3137302e38322e35362e302f32322d3234203d3e20323632373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:22:2f:17:dc:18:a2:d9:ec:89:e5:05:2f:68:d8:f1:53:
         24:9b:88:c5:96:25:ab:d3:dd:9a:2f:e9:34:e5:82:ea:9c:02:
         6a:05:26:a2:6a:bb:6b:ff:d5:2a:c2:59:e2:61:e4:e9:66:f7:
         c6:aa:9e:a1:8f:20:9c:7c:91:da:18:72:a7:5b:60:a8:f7:28:
         ac:19:de:5b:cf:8f:f8:8e:4a:0f:45:08:97:f3:54:7a:d3:d5:
         29:7b:d6:da:42:ac:57:99:c5:c0:34:e1:fb:b9:49:5f:da:96:
         91:f5:af:ec:ee:90:e7:b9:7c:9e:00:45:96:a7:01:83:cd:06:
         11:ff:d0:ef:1a:ed:21:8f:71:d6:d1:ec:26:76:f8:eb:a4:5a:
         3e:0d:db:d8:a8:91:de:e1:0e:ab:7f:39:15:b9:d6:82:90:35:
         3f:b6:a2:d6:63:19:32:3a:c5:d5:ab:b5:f3:c3:5c:25:a0:1a:
         50:c7:ca:d6:3d:aa:8e:09:59:1d:69:74:7c:cd:7e:26:50:53:
         93:76:da:a8:de:fe:5f:c7:7b:4e:25:e5:5a:64:1e:d8:25:f4:
         80:60:33:b2:b1:44:32:b5:44:94:1e:b3:fb:99:89:d2:2d:77:
         d8:ae:21:30:b7:c6:c6:56:56:c4:cf:ad:70:4a:04:e8:34:3d:
         86:51:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org